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which may be obtained, how bulk metadata is collected under these authorities, and the storage restrictions with which NSA must comply. Other modules 
will address restrictions related to the dissemination and processing of the bulk metadata. 

(U) This module will enable you to: 

• (TS//SI//NF) Distinguish differences between BR and PR/TT metadata 

• (JS//SI//NF) Recognize restrictions placed on BR and PR/TT metadata storage and retention by the BR and PR/TT Bulk Metadata Programs 
(-TS//SI//NF) Note that other restrictions will be addressed in other modules. 
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(TS//S I //NF ) (OGC Attorney): Let's take a look at the BR Bulk Metadata Program. As we mentioned in Module 1 , the BR Primary Order pertains specifically 
to telephony metadata which is kept by U.S. -based telecommunications companies as part of their normal business operations. They retain this 
information, in part, so they can send their subscribers a bill every month. 

(TS//S I //NF) The business records include, for example, originating and terminating telephone numbers, International Mobile Subscriber Identity (IMSI), 
International Mobile Station Equipment Identity (IMEI), trunk identifiers, and telephone calling card numbers. 



(TS//S I //NI") These Business Records 
Include Examples Such As: 

• Originating and terminating telephone 
numbers 

• IMSI 

• IMEI 

• Trunk identifiers 

• Telephone calling card numbers 
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(TS//S I //NF) These Business 
Records Do Not Include: 

• Content of any communication 

• Name, address, or financial 
information of a subscriber or 
customer 



f TS//S I //NF) (OGC Attorney): As you can imagine, NSA is interested in the same kinds of telephony information for^^^^^^^Jand contact chaining 
analysis. Because these business records^ls(0<nown i ^a^alkjletaih'ec^ U.S.-based telecommunication companies as part 
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■f TS/ZS I Z/NT ) (OGC Attorney): In the case of Internet communications, there are no easily accessible comparable business records that could provide NSA 



with the kind of information in which we are interested. Subscrib ers do not receive a bill based on who the 
metadata for internet communications, the FISC permits NSA to 
PR/TT metadata and forward it back to NSA for analysis. 



uire the bulk 




^ TS//S I //N E). As we discussed in Module 1 , NSA is not permitted to collect communications content under either of these Orders, so 
|n such a way as to exclude content. J 
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( TS//S I //NF) (OGC Attorney): The FISC goes into great detail in the Orders about many aspects of the collection to provide reasonable assurance that NSA 
is not overreaching its authority. 

(TS//SI//NF ) For example, FISC requirements tha^affec^RA 

• Which U.S.- based telecommunications! 

• The specificl 
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f FS//S I //Nr) (OGC Attorney): Both Orders mandate that the BR and PR/TT bulk metadata must be stored in repositories within secure networks under 
NSA's control. The methods for storing the results of approved queries of the bulk metadata w ill be explained in Module 4. BR and PR/TT bulk metadata 
may only be stored in authorized and specifically designated repositories , \ 



(TS//S I //NF) The FISC also requires NSA to mark and tag the BR and PR/TT metadata so that software and other control mechanisms may provide 
reasonable assurance that the information is only accessed by authorized personnel who have completed the required training and have the necessary 
credentials. 



(TS//S I //NF) The bulk BR and PR/TT metadata coming into the repositories has an expiration date set by the FISC. NSA does not have the authority to 
maintain the unselected BR and PR/TT metadata indefinitely. The FISC permits NSA to maintain this metadata for 60 months from the date of collection at 
which time it must be destroyed. 



TOP SECRET//SI//NOFORN 
Page 9 of 12 



TOP SECRET//SI//NOFORN 



DATE/PREPARER: 



Topic 

(U) Knowledge 
Check 



Home 



Page Classification 
T OP SECRET//COM I NT//NOrORN 



Screen Number 
10 of 11 



Exit 



Glossary 



Back 



Next 



FRAME ID: 2100 



NEXT FRAME ID: 2110 



BACK FRAME ID: 2090 



ALT TAG: 



GRAPH IC/AV: 

(U) Knowledge checks in the travel journal 



(U) Knowledge Check 

1. -f- TS//S I //Nr) Which of the following describe the BR Bulk Metadata Program: 

a) ( TS/ZS I Z/NT) The BR Order pertains to telephony metadata which is kept by U.S.-based 
telecommunication companies. 

b) (TG//G I //Nr) BR refers to Business Records which is information U.S. -based telecommunications 
companies already have in their possession and use as part of their normal business. 

c) fF S//S I //NF) NSA uses Business RecortHnfomiato as terminating telephone numbers, 
IMSI, IMEI and trunk identifiers for^^^^^^^^^Hcontact chaining analysis. 

d) (U) All of the above. 

2. (TS//S I //N F) Which of th£followinc|_doesjTot_des^^ 

a) (TS//S l//NF) |* 

b) (TS//SI//NF) NSA only collects limited metadata from the communications of approved 
targets. 

c) (T S//S I //NF -) NSA collects specific categories of metadata to include the “to,” “from,” “cc,” and 
“bcc” lines of an email. 

d) (U) None of the above. 

i Which of the following statements is true? 

a) (T G//G I //NF ) Bulk BR and PR/TT metadata may not be kept for longer than 48 months. 

b) (TG//G I //Nr) Non-U. S. person metadata may be kept at NSA indefinitely. 

c) <TS//S I //NP )-The bulk metadata is tagged to provide reasonable assurance that the data is 
only accessed by authorized personnel. 

d) (U) All of the above. 

e) (U) None of the above. 



(U) (OGC Attorney): Let's check what you remember from this topic! 



ANSWERS: 
Question 1. (- TS //£ 



H//NF ) Correct! All of the above describe the BR Bulk Metadata Program. 



(TS//SI//NF) Incorrect. The correct answer is d). All of the above describe the BR Bulk Metadata Program. 



Question 2. (TG//GI//F 
of approved targets. \ 



.from the communications 
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•( TG//G I //NP )- Incorrect. The correct answer is b) because^O^N^^^RU^haUoiTTe^RTr^i^l^etadatc^rogran 
from the communications of approved targets. 

Question 3. (TG//G I //NT ) Right! The bulk metadata is tagged to provide reasonable assurance that the data is only accessed by authorized personnel. 
(TS//S I //NF) Incorrect. The correct answer is c). The bulk metadata is tagged to provide reasonable assurance that the data is only accessed by authorized 
personnel. 
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(U) (OGC Attorney): Now that we have completed this part of our trip, you should be able to: 

• (TS//S I //N F) Distinguish differences between BR and PR/TT Bulk Metadata Programs 

• (TS//S I //NF) Recognize restrictions placed on metadata storage and retention by the BR and PR/TT Bulk Metadata Programs 



(TS//S I //NF) During the next portion of our trip, we will meet up with Marvin who will talk to us about the Reasonable Articulable Suspicion (RAS) standard 
and the requirements that must be met in order to query the bulk metadata. 
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